Administer all your internal audit activities on Auditrunner’s process-based, risk-oriented internal audit module. In line with IIA standards.
Associate risks with control points, accredited certification standards and governing regulations, along with information inventory assets. Allows for ISO 31000 Accreditation.
Define Controls for any process of any department, with control description, control target, key control, control function, automation and frequency details. In line with COSO 2013 Framework.
Manage Quality accreditation through audit activities, corrective and preventive actions and registering customer complaints.
With our Criteria based audit architecture execute audit activities for any regulation, collect findings and generate reports automatically.
Compose your regulatory checklist such as for SOX Compliance, define obligations, associated with risks and assign action plans to business units.
Ensure compliance with Data Protection Regulations such as CCPA and GDPR. Compile Personal Data Inventory. Compose data breach reaction plans and manage data destruction policies.
Execute Business Impact Analysis and ensure compliance with ISO 22301 Business Continuity Management Standard.
Compile Information Asset Inventory ensure compliance with ISO 27001 Information Security Management Standard.
Create, manage, revise and distribute all internal documentation on a single platform using the advanced document manager and text editor.
Model flow charts of processes with BPMN2 notation, create RACI and SIPOC matrices, associate attributes such as risks, controls, info assets.
Report and track progress of all action plans created for findings, nonconformities, regulations and manual entries on all Auditrunner modules.
Automatic audit trail feature keeps track of action and time details of all tasks and applications on the platform. Compile all documentation with revision details.
Compile all internal company processes along with associated documents, flow charts, and other GRC elements.
Compile all governing regulations and standards along with associated documents, literature and other GRC elements.
Manage device and application compliance against a pre-defined set of standards and issue unique electronic certificates.
Organize and execute meetings, create meeting minutes and assign action plans on the platform.
Create and distribute training material, test and surveys. Evaluate results and issue certificates.
Enable anonymous and encrypted employee ethical breach reporting.